Security Simulations
Buffer Overflow
SQL Injection
Normal
Overflow
+ Canary
+ ASLR
+ DEP/NX
Stack top
Return addr
Canary
Local buf
Stack bottom
🟢 Normal
🔴 Overflow
🟡 ASLR randomized
🟠Canary detected
Enter a username (try:
' OR '1'='1
or
admin; DROP TABLE users; --
)
Vulnerable: string concatenation
Safe: parameterized query